EUVD-2026-45296
GHSA-566p-xg3p-vvgr
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Token leak is passive, so attacker depends on capturing logged/referred URLs (AC:H); no auth needed to receive leaked tokens (PR:N); confidentiality only, enabling session takeover (C:H, I:N, A:N).
Primary rating from Vendor (ibm).
CVSS VectorVendor: ibm
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs.
AnalysisAI
Sensitive information disclosure in IBM Engineering AI Hub 1.0.0 through 1.2.0 allows remote attackers to harvest session tokens that the application places directly in URLs, enabling session hijacking and account takeover. IBM (the reporting vendor) has released a fix; there is no public exploit identified at time of analysis and the CVE is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that IBM Engineering AI Hub emit a valid session token within a URL (query string or path) - the CWE-598 condition - and that the attacker gain access to a place where that URL is recorded or transmitted: reverse-proxy/load-balancer/web-server access logs, SIEM/log-aggregation stores, browser history on a shared machine, or the HTTP Referer header sent to an attacker-controlled or third-party external site. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), reflecting network-reachable, unauthenticated, low-complexity access with high confidentiality impact and no integrity or availability impact - consistent with a pure information-disclosure/session-token leak. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with read access to a shared reverse-proxy or web-server access log - or who operates an external site that receives the Referer header from an Engineering AI Hub user - extracts a valid session token embedded in a logged URL. The attacker replays that token against the application to hijack the victim's authenticated session and read the data that user can access. … |
| Remediation | Apply the vendor fix referenced in IBM's advisory at https://www.ibm.com/support/pages/node/7279964 (Patch available per vendor advisory); the input does not specify an exact fixed version number, so confirm the target build directly from that advisory for your installed 1.0.0/1.1.0/1.2.0 release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all instances of IBM Engineering AI Hub running versions 1.0.0 through 1.2.0 deployed in your environment and catalog the sensitivity of data accessible through these systems. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Engineering Ai Hub
View allStored/reflected cross-site scripting in IBM Engineering AI Hub 1.0.0 through 1.2.0 lets a remote unauthenticated attack
Cross-site scripting in IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 enables remote attackers to inject and e
IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0 expose an open redirect flaw (CWE-601) that enables remote attac
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today